GRCLibrary.ai

Procedure

Change Management and Configuration Control Procedure

To ensure that changes to production systems are controlled, traceable, and reversible, minimizing disruption to services and preventing unauthorized modifications to security-critical configurations.

Type
Procedure
Version
1.3.16
Date
2026-10-27
Owner
Chief Information Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Operations
Review frequency
Annual and upon material platform or regulatory change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Scope
  • Governance and accountability
  • 1. Change classification
  • 2. Change lifecycle
  • 3. Change advisory board (CAB)
  • 4. Emergency change process
  • 5. Iac and configuration baseline
  • 6. Rollback planning
  • 7. Records and evidence
  • 8. Metrics
  • Framework alignment

Frameworks it maps to

Related documents